gws-workflow-standup-report
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a markdown instruction file that defines how an AI agent should call a specific CLI tool ('gws'). No executable code, remote downloads, or credential exposures are present in the skill definition.
- [INDIRECT_PROMPT_INJECTION]: This skill defines a workflow that ingests data from external sources. (1) Ingestion points: Processes data from Google Calendar events and Google Task lists via the gws CLI tool. (2) Boundary markers: The skill does not provide specific delimiters or instructions to treat external data as untrusted content. (3) Capability inventory: The skill is limited to read-only reporting via the gws command. (4) Sanitization: No content sanitization or validation is specified in the skill instructions.
Audit Metadata